Last updated: 07/02/2026

Golden Hands Massage ("we," "our," or "us") is committed to protecting your privacy and being transparent about how we collect, use, and protect your personal information. This Privacy Policy explains our data practices in clear, understandable terms.

Quick Summary: We collect only the information necessary to provide our services, never sell your personal data, and give you full control over your information. You have the right to access, correct, or delete your data at any time.

1. Data Controller Information

Golden Hands Massage is the data controller responsible for your personal information. You can contact us at:

Golden Hands Massage
27 Church Street, Staines, TW18 4EN
United Kingdom
Email: [email protected]
Phone: 07377554324

2. Information We Collect

Information You Provide Directly

Account Information: Name, email address, password, and profile details
Communication Data: Messages you send us, support requests, and feedback
Payment Information: Billing address and payment method details (processed securely by our payment processors)
Service Data: Content you create, upload, or share through our services

Information We Collect Automatically

Usage Data: How you interact with our services, features used, and time spent
Device Information: IP address, browser type, operating system, device identifiers
Analytics Data: Performance metrics, error logs, and usage patterns
Location Data: General geographic location based on IP address

Information from Third Parties

We may receive information from business partners, social media platforms (if you connect your accounts), and public databases, but only when necessary for providing our services.

3. How We Use Your Information

We process your personal information for the following purposes:

Service Provision (Legal Basis: Contract Performance)

Creating and managing your account
Providing our services and features
Processing payments and transactions
Providing customer support

Service Improvement (Legal Basis: Legitimate Interest)

Analyzing usage patterns to improve functionality
Developing new features and services
Conducting research and analytics
Testing and optimizing our platform

Communication (Legal Basis: Consent or Legitimate Interest)

Sending service updates and important notices
Responding to your inquiries and support requests
Marketing communications (only with your consent)
Security alerts and fraud prevention

Legal Compliance (Legal Basis: Legal Obligation)

Complying with applicable laws and regulations
Responding to legal processes and law enforcement requests
Protecting our rights and preventing fraud

4. Information Sharing and Disclosure

We never sell your personal information. We only share your information in the following limited circumstances:

Service Providers

We work with trusted third-party companies that help us operate our services, such as cloud hosting providers, payment processors, and analytics services. These providers are contractually bound to protect your information and use it only for the services they provide to us.

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

Legal Requirements

We may disclose your information if required by law, legal process, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Consent

We may share your information with your explicit consent for specific purposes not covered in this policy.

5. Data Security

We implement industry-standard security measures to protect your personal information:

Encryption: Data is encrypted in transit and at rest using advanced encryption standards
Access Controls: Strict access controls ensure only authorized personnel can access your data
Regular Audits: We regularly review and update our security practices
Incident Response: We have procedures in place to detect and respond to security incidents
Employee Training: Our team is trained on data protection and security best practices

While we take extensive precautions, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your information using the most current security standards.

6. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

Account Data: For the duration of your account plus 90 days after deletion
Transaction Records: 7 years for tax and legal compliance
Support Communications: 3 years for service improvement
Analytics Data: Anonymised data may be retained indefinitely for research
Marketing Data: Until you withdraw consent or 2 years of inactivity

7. Your Privacy Rights

You have significant control over your personal information. Depending on your location, you may have the following rights:

Universal Rights

Access: Request a copy of the personal information we hold about you
Correction: Update or correct inaccurate personal information
Deletion: Request deletion of your personal information
Portability: Receive your data in a portable format
Withdrawal of Consent: Withdraw consent for processing at any time

EU/UK Residents (GDPR)

Restriction: Limit how we process your information
Objection: Object to processing based on legitimate interests
Automated Decision-Making: Opt out of automated profiling
Complaint: File a complaint with your local data protection authority

To exercise your rights: Email us at [email protected] or use our privacy request form. We will respond within 30 days and may need to verify your identity for security purposes.

8. International Data Transfers

We may transfer your information to countries outside your country of residence. When we do:

We ensure appropriate safeguards are in place (such as EU Standard Contractual Clauses)
We work only with partners who provide adequate protection for your data
We implement additional security measures for international transfers

9. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience. See our Cookie Policy for detailed information about the cookies we use and how to manage your preferences.

10. Children's Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will:

Notify you of material changes via email or prominent notice on our website Post the updated policy with the new effective date Maintain previous versions for your reference

12. Contact Information

For privacy-related questions, to exercise your rights, or to file a complaint:

Email: [email protected]

Mail: Golden Hands Massage Attention: Privacy Officer

27 Church Street, Staines, TW18 4EN United Kingdom

Response Time: We respond to privacy requests within 30 days.

14. Regulatory Information

EU/UK Residents: You can file complaints with your local data protection authority.